perl-forks

maintainer jnbek · 22 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The source is a Perl module tarball from search.mcpan.org, a legitimate but non-whitelisted CPAN mirror; building and installing Perl modules from CPAN is standard practice, and the source is verified via matching md5 and sha512 checksums, making the risk low.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a Perl module tarball from search.mcpan.org, a legitimate but non-whitelisted CPAN mirror; building and installing Perl modules from CPAN is standard practice, and the source is verified via matching md5 and sha512 checksums, making the risk low.

1 higher static finding superseded - not the current verdict (shown for transparency)

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:14 source=('http://search.mcpan.org/CPAN/authors/id/R/RY/RYBSKEJ/forks-0.36.tar.gz')

PKGBUILD

1 offending line(s) highlighted

      1# Contributor: John D Jones III <jnbek1972 -_AT_- g m a i l -_Dot_- com>
    
      2# Generator  : CPANPLUS::Dist::Arch 1.29
    
      3
    
      4pkgname='perl-forks'
    
      5pkgver='0.36'
    
      6pkgrel='1'
    
      7pkgdesc="drop-in replacement for Perl threads using fork()"
    
      8arch=('i686' 'x86_64')
    
      9license=('PerlArtistic' 'GPL')
    
      10options=('!emptydirs')
    
      11depends=('perl-acme-damn' 'perl-devel-symdump' 'perl-list-moreutils>=0.15' 'perl-sys-sigaction>=0.11')
    
      12makedepends=()
    
      13url='http://search.mcpan.org/dist/forks'
    
      14source=('http://search.mcpan.org/CPAN/authors/id/R/RY/RYBSKEJ/forks-0.36.tar.gz')
    
      15md5sums=('48a1819dd2ff67d756f268771e1a9827')
    
      16sha512sums=('d361d7fcfec925b03552bb5f8ae4eb2155b7945d0a57ff04c9ed45e7620a55fe6a1907b1aef8af3f80f8eabc158ab5886628ee1a987dc674e4c25e1042425469')
    
      17_distdir="forks-0.36"
    
      18
    
      19build() {
    
      20  ( export PERL_MM_USE_DEFAULT=1 PERL5LIB=""                 \
    
      21      PERL_AUTOINSTALL=--skipdeps                            \
    
      22      PERL_MM_OPT="INSTALLDIRS=vendor DESTDIR='$pkgdir'"     \
    
      23      PERL_MB_OPT="--installdirs vendor --destdir '$pkgdir'" \
    
      24      MODULEBUILDRC=/dev/null
    
      25
    
      26    cd "$srcdir/$_distdir"
    
      27    /usr/bin/perl Makefile.PL
    
      28    make
    
      29  )
    
      30}
    
      31
    
      32check() {
    
      33  cd "$srcdir/$_distdir"
    
      34  ( export PERL_MM_USE_DEFAULT=1 PERL5LIB=""
    
      35    make test
    
      36  )
    
      37}
    
      38
    
      39package() {
    
      40  cd "$srcdir/$_distdir"
    
      41  make install
    
      42
    
      43  find "$pkgdir" -name .packlist -o -name perllocal.pod -delete
    
      44}
    
      45
    
      46# Local Variables:
    
      47# mode: shell-script
    
      48# sh-basic-offset: 2
    
      49# End:
    
      50# vim:set ts=2 sw=2 et:
    
      51

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 00:11:18	LOW	2
2026-07-31 00:14:10	LOW	2
2026-07-30 00:17:23	LOW	2
2026-07-29 00:25:53	LOW	2
2026-07-28 00:07:28	LOW	2
2026-07-27 00:24:32	LOW	2
2026-07-26 00:07:32	LOW	2
2026-07-25 00:13:44	LOW	2
2026-07-24 00:02:28	LOW	2
2026-07-23 00:14:47	LOW	2
2026-07-22 00:29:32	LOW	2
2026-07-21 00:24:15	LOW	2
2026-07-20 00:19:49	LOW	2
2026-07-19 00:17:08	LOW	2
2026-07-18 00:14:48	LOW	2
2026-07-17 00:06:16	LOW	2
2026-07-16 00:05:41	LOW	2
2026-07-15 00:09:25	LOW	2